Brazil security reports

M

Melissa

melissa.com.br

75

Melissa.com.br is the official online retail store for the Melissa footwear brand in Brazil, offering a variety of products including sneakers, sandals, and platforms. The website targets general consumers interested in fashion footwear and operates as a large-scale e-commerce platform. The site employs modern web technologies and analytics tools such as Segment Analytics, Microsoft Clarity, and Google Tag Manager, indicating a mature digital infrastructure. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. Security measures include HTTPS and Google reCAPTCHA Enterprise, but the absence of explicit security headers and published security policies suggests room for improvement in security posture. Privacy and cookie policies are not explicitly found, which may impact compliance with data protection regulations. Overall, the website is professionally designed, mobile-optimized, and provides a good user experience, but lacks some transparency in privacy and security documentation.

A

Ana Soares Psicóloga

anapsi.com

55

Ana Soares Psicóloga is a specialized psychological therapy service provider based in Moema, São Paulo, Brazil. The website presents a professional image focused on cognitive-behavioral therapy, schema therapy, and expertise in eating disorders. The business targets individuals seeking mental health support in the local region. The digital presence is built on the Wix platform, leveraging Wix Thunderbolt framework and standard JavaScript polyfills. The site is moderately optimized for mobile and SEO, though it is set to noindex, limiting organic search visibility. Security posture is adequate with HTTPS and Wix's built-in security features, but lacks explicit security headers and privacy compliance documentation. Overall, the website reflects a small healthcare service with consistent branding and moderate technical maturity.

O

Optum, Inc.

optum.com.br

62

Optum Brasil is a branch of Optum, Inc., a global leader in healthcare services and innovation. The website presents a comprehensive portfolio of health and wellness solutions tailored for the Brazilian market, focusing on emotional well-being, prevention programs, and workforce health. The company targets employers, health service providers, and health plan operators, positioning itself as a trusted partner in healthcare transformation. The site content is professionally curated, with consistent branding and a clear focus on business services and consulting.

Z

Zeh Fernandes - Product, Design & Technology

zehfernandes.com

58

The website zehfernandes.com is a personal professional portfolio of a Brazilian designer specializing in product, design, and technology. It serves as a showcase of the individual's work and structural thinking, targeting a general audience interested in creative software and design. The site is well-positioned as a personal brand platform with a clear focus on enhancing human creativity through software. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and good mobile optimization. The use of Plausible Analytics indicates a privacy-conscious approach to visitor tracking, although no cookie consent mechanism is implemented. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved privacy and security documentation.

D

DOC

doc.cc

59

DOC is a specialized editorial platform focused on design, user experience, and product making, targeting professionals and enthusiasts in the design community. It operates as a content publishing platform with a strong association to the UX Collective, enhancing its credibility and market position within the design media sector. The website offers articles, series, and newsletters, serving a niche audience interested in thoughtful design discourse. Technically, the site is built on modern frameworks such as Nuxt.js and uses Prismic CMS, ensuring a performant, mobile-optimized, and accessible user experience. The integration of Google Analytics indicates moderate user tracking for analytics purposes. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks published security policies or incident response information, which are areas for improvement. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, posing a compliance risk. Overall, the site is professional, trustworthy, and well-branded but would benefit from enhanced privacy and security disclosures.

CAT is a Brazilian-focused company specializing in the sale and support of power tools and outdoor equipment, leveraging the globally recognized Caterpillar brand. Their product range includes impact drills, grass trimmers, chainsaws, leaf blowers, and lawn mowers, targeting both consumers and professionals. The website serves as a product catalog and e-commerce platform with customer support and newsletter subscription features. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Hosting of images on Amazon S3 indicates a cloud-based infrastructure for media delivery. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the site is professionally designed with consistent branding but requires improvements in privacy compliance and security best practices.

The website gsthnz.com is a personal blog maintained by Gustavo Heinz, a software developer based in Brazil. The site primarily serves as a platform for sharing personal insights, software development topics, and updates. It targets a general audience interested in technology and software development. The business model is non-commercial, focusing on content sharing rather than monetization. The domain was registered in 2018 and shows consistent updates, indicating an active personal project. From a technical perspective, the website uses basic HTML and CSS without any detected CMS or advanced frameworks. Hosting appears to be through NameCheap, inferred from registrar DNS servers. The site has moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. Security posture is modest; the domain uses HTTPS (implied by URL scheme), but no security headers or DNSSEC are enabled. There are no forms or data collection points, reducing attack surface but also limiting interactivity. No privacy, cookie, or terms of service policies are present, which is typical for personal blogs but limits compliance with GDPR or similar regulations. Overall, the site is low risk with a trustable domain registration matching the site owner. Recommendations include adding basic security headers, enabling DNSSEC, and publishing privacy and cookie policies to improve compliance and trust. The site is safe for general audiences with no adult or questionable content detected.

M

MIA „Rossiya Segodnya“

noticiabrasil.net.br

61

Sputnik Brasil operates as a regional Portuguese-language branch of the international news agency Rossiya Segodnya, providing current news, urgent updates, and political, economic, and social analyses primarily targeting Brazilian and Portuguese-speaking audiences. The website offers multimedia content including videos and live radio streaming, positioning itself as a comprehensive news source within its market segment. Technically, the site employs modern web technologies such as responsive design, SVG icons, and asynchronous JavaScript loading, alongside third-party services for analytics and advertising, including Yandex Metrika and Google Tag Manager. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting GDPR adherence. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy media platform with moderate to good technical and security maturity.

S

Serasa Experian

serasaexperian.com.br

67

Serasa Experian is a leading Brazilian data technology company specializing in business credit information, fraud prevention, and decision-making solutions. Positioned as the largest Datatech in Brazil, it serves primarily business clients with services such as CNPJ consultation and credit scoring (Serasa Score). The website reflects a mature digital presence with comprehensive content, clear branding, and strong compliance with privacy regulations including GDPR. Technically, the site leverages advanced analytics, consent management, and modern web technologies, indicating a high level of digital maturity. Security posture is robust with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates professionalism, trustworthiness, and a strong market position in the financial data services sector.

H

Huehoco ACP do Brasil

huehocoacp.com.br

42

Huehoco ACP do Brasil is a large manufacturing company specializing in high-performance metal coatings and surface technology solutions for diverse industrial applications. With a strong presence in Brazil and Latin America, the company serves sectors such as construction, automotive, white goods, packaging, and personal protective equipment. Their product portfolio includes customized metal coils, stretched and stamped metal strips, and coil coating painting technology. The company is part of the GRUPO HUEHOCO, which operates globally across multiple continents and countries. The website reflects a professional and consistent brand image, targeting industrial clients with detailed product and segment information. Technically, the website is built on WordPress using Elementor and enhanced with GDPR compliance plugins like Complianz. It employs modern web technologies including WebP image optimization and integrates Google Analytics and Google Ads for tracking and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the analysis. WHOIS data is consistent with the business claims, showing no privacy protection or suspicious patterns. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and incident response documentation would enhance the security posture and trustworthiness further.

D

DATAFRETE

datafrete.com

59

DATAFRETE is a Brazilian company specializing in digital logistics solutions, offering a Transport Management System (TMS), Business Process Outsourcing (BPO) for freight management, and routing software. The company positions itself as a key player in the logistics technology sector with over 12 years of experience and a client base exceeding 230 companies. Their platform integrates multiple sales channels and automates transport management to optimize costs and operational efficiency. The website is professionally designed, SEO optimized, and uses modern web technologies including WordPress, Elementor, and WP Rocket for performance enhancements. However, the WHOIS data for the domain is missing or unavailable, raising questions about domain registration legitimacy.

I

igus

igus.com.br

64

igus is a specialist manufacturer and direct retailer of motion plastics, offering products such as cable carriers, self-lubricating bushings, and linear technology components. The company targets industrial and manufacturing sectors, providing innovative plastic solutions for motion applications. The website demonstrates a strong global presence with multiple international domains and localized content. Technically, the site is built on modern frameworks like Next.js, integrates advanced analytics (Piwik PRO, Google Tag Manager), and uses Salesforce Live Agent for customer interaction, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, serving its industrial audience effectively.

N

Netuna Criação de sites Wordpress

netuna.com.br

47

Netuna Criação de sites Wordpress is a Brazilian digital agency specializing in WordPress website creation, maintenance, SEO optimization, and Google Ads management primarily serving clients in Belo Horizonte and surrounding areas. The company has a well-established market presence with a domain registered since 2009 and client testimonials indicating business activity since 2004. Their website reflects a professional and consistent brand image with a focus on delivering measurable digital marketing results. Technically, the site is built on WordPress with modern plugins and tools, including Yoast SEO, Google Analytics, and Facebook Pixel, supporting effective marketing and analytics capabilities. Security posture is adequate with HTTPS enforced and anonymized analytics, but could benefit from enhanced security headers and explicit privacy and cookie policies. Overall, the website is accessible, well-structured, and trustworthy, with clear contact information and active social media engagement.

M

Mereo

mereo.com

48

Mereo is a Brazilian technology company specializing in human resources management solutions, offering a comprehensive SaaS platform for performance management, competency development, employee engagement, and related HR functions. The company targets medium to large enterprises and has a significant market presence with over one million users impacted. The website is professionally designed using WordPress and Elementor, with modern SEO and analytics tools integrated, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and domain registration protections, though there is room for improvement in published privacy and security policies. Overall, the website presents a trustworthy and professional image suitable for its B2B audience.

The website cimentoverdedobrasil.com.br is currently inaccessible to visitors, presenting a 403 Access Denied error page. This indicates that the server is actively blocking access, likely due to permission settings or IP restrictions. The page content is minimal and primarily serves as an error notification with guidance on common causes and troubleshooting steps related to file permissions and .htaccess configurations. The site is hosted by HostGator, as indicated by branding and footer links, but no business-specific content, contact information, or privacy policies are available on the page. Technically, the site uses an outdated jQuery library and lacks modern security headers or analytics integrations. The domain uses Microsoft Online name servers, suggesting some integration with Microsoft services, but no registrant details are provided to confirm ownership or legitimacy fully.

G

Grupo Ferroeste

grupoferroeste.com.br

49

Grupo Ferroeste is a large Brazilian industrial group specializing in steel production, fuels, gases, and cement manufacturing with operations across multiple states. The website presents a professional corporate image with clear branding and comprehensive information about its subsidiaries and business sectors. The technical infrastructure is based on WordPress with modern plugins and security features such as hCaptcha and GDPR compliance mechanisms. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with detailed policies and a dedicated Data Protection Officer contact. Overall, the website reflects a mature digital presence aligned with the company's industrial business model and regional market position.

The website www.vagas.com.br currently presents an error page titled 'Ocorreu um erro | VAGAS.com.br', indicating that the main content is inaccessible or blocked. Due to this, no meaningful business, privacy, or security information can be extracted from the site content. The domain is hosted on Amazon AWS infrastructure, as indicated by the nameservers, which suggests professional hosting. However, the lack of accessible content and absence of privacy, cookie, or contact information limits the ability to assess the company's digital maturity or security posture. No security policies, incident response contacts, or certifications are found in the provided data. Overall, the site is currently non-functional from a user perspective, which severely impacts trust and usability.

TOTVS is an established enterprise technology company offering a cloud native software platform named 'Plataforma TOTVS Apps'. The website presents a minimal but focused description targeting developers and businesses interested in application customization and development within the TOTVS ecosystem. The platform emphasizes cloud native applications, positioning itself as a modern software provider in Brazil. Technically, the website uses standard HTML5, CSS3, and MDBootstrap for styling, with external fonts loaded from Google Fonts. The site is mobile optimized with basic accessibility and SEO features but lacks advanced metadata or structured data. Security posture is weak due to absence of security headers, privacy policies, and contact information for incident response. No forms or data collection mechanisms are present, reducing immediate privacy risks but also limiting user engagement. Overall, the site is functional but basic, with room for improvement in security, compliance, and content richness.

S

SoftExpert

softexpert.com

88

SoftExpert is a global software company specializing in business compliance, innovation, and digital transformation solutions. Their offerings target enterprises seeking to improve governance, risk management, and quality processes. The company maintains a professional online presence with a multilingual website and comprehensive service descriptions, positioning itself as a mature player in the technology sector. The website leverages modern web technologies including React (Next.js), HubSpot marketing tools, and various analytics platforms, indicating a digitally mature infrastructure. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The missing WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and certifications. Strategic recommendations include publishing security policies, adding incident response contacts, and implementing vulnerability disclosure mechanisms to enhance trust and compliance.

The website analyzed is a subdomain of nimbi.com.br, serving as a login portal for the Nimbi platform. The specific page is a 404 Not Found error page indicating that the requested link no longer exists and provides a link to the login page. The business appears to be technology-focused, providing platform access likely for clients or employees. The technical infrastructure is based on ASP.NET Web Forms and the OutSystems low-code platform, hosted on Amazon AWS infrastructure. The site shows basic mobile optimization and moderate performance. Security posture is average with HTTPS implied but lacking explicit security headers and visible privacy or cookie policies. No analytics or advertising scripts were detected, and no contact or business information is disclosed on this page. The domain WHOIS data is consistent with the business branding and shows active registration with AWS nameservers. Overall, the site is functional but minimal in content and security disclosures, scoring below average in AI evaluation.

D

DATAFRETE

datafrete.com.br

60

DATAFRETE is a Brazilian company specializing in digital logistics solutions, offering a Transport Management System (TMS), Business Process Outsourcing (BPO) for freight management, and route optimization services. The company positions itself as a mature player in the transportation sector with over 12 years of experience and a client base exceeding 230 companies. Their platform integrates multiple sales channels and logistics operations to optimize freight costs, improve operational efficiency, and enhance customer experience. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Security posture is generally good with HTTPS and modern technologies in use, but lacks some security headers and explicit privacy and incident response policies. Overall, the business appears credible and established, but improvements in transparency and security documentation are recommended.

V

Villares Metals S.A.

villaresmetals.com.br

71

Villares Metals S.A. is a well-established Brazilian steel manufacturing company with a history spanning approximately 80 years. The company specializes in producing various types of steel including engineering, tool, stainless, high speed, valve steels, and specialty alloys. Their business model focuses on full-service steel production, from raw material selection to delivery, serving diverse industrial sectors such as aerospace, automotive, energy, and medical. The website reflects a mature digital presence with multilingual support, customer portals, and comprehensive corporate information. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforcement, cookie consent management, and CAPTCHA integration, though there is room for improvement in incident response transparency and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, supporting Villares Metals' market position as a reliable industrial steel producer.

Shinagawa Refratários do Brasil is a well-established global leader in refractory manufacturing, leveraging Japanese technology to provide high-performance solutions for industrial clients in manufacturing and energy sectors. The website reflects a mature digital presence built on WordPress, featuring modern design, responsive layouts, and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS and cookie consent mechanisms, though some minor media issues and lack of explicit security policies were noted. Overall, the site projects professionalism and trustworthiness aligned with the company's long history and market position.

S

Samarco

samarco.com

64

Samarco is a Brazilian mining company specializing in the production of iron ore pellets with integrated operations in Minas Gerais and Espírito Santo. The company has an established market presence since its founding in 1977 and targets industrial and energy sectors. The website is professionally designed using WordPress with modern SEO and accessibility features, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and standard marketing/tracking tools implemented, though there is room for improvement in security headers and privacy compliance. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and social media presence support the company's authenticity. Overall, the risk is moderate with recommendations to enhance transparency and security practices.

R

Reframax

reframax.com.br

45

Reframax is a Brazilian company specializing in refractory solutions and industrial services including thermal insulation, electromechanics, and industrial painting. With over 25 years of experience and a client base exceeding 500 customers domestically and internationally, it holds a strong market position in the manufacturing and industrial sectors. The website reflects a professional and well-established business with comprehensive service offerings and a clear focus on quality and compliance. Technically, the site is built on WordPress with modern frameworks and plugins ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, reCAPTCHA on forms, and no exposed sensitive data, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact channels.

G

GERDAU AÇOS LONGOS S.A.

gerdau.com.br

64

Gerdau Brasil is a well-established steel manufacturing company operating primarily in Brazil, specializing in long steel products. The company has a strong market presence as indicated by its long domain registration since 1995 and consistent corporate branding. The website reflects a professional and industrial focus, targeting business clients in construction and manufacturing sectors. The digital infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, integrated with a consent management platform to ensure privacy compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Overall, the website demonstrates a mature digital presence aligned with corporate standards and regulatory compliance.

C

CBMM

cbmm.com

74

CBMM is a leading supplier and technology partner specializing in niobium products, primarily serving the energy and structural sectors. Established in 2004, the company has a strong market position supported by a professionally designed website that highlights its expertise and product offerings. The website targets industrial and technology sectors interested in leveraging niobium's benefits. Technically, the site uses a modern tech stack including Google Tag Manager, OneTrust for cookie consent, and analytics tools such as Hotjar and LinkedIn Insight, hosted on Azure DNS with Sitecore CMS. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and safe for general audiences.

A

Aço Verde do Brasil S/A

avb.com.br

47

Aço Verde do Brasil (AVB) is a Brazilian steel manufacturing company specializing in sustainable steel products with a strong emphasis on low CO2 emissions. The company offers a range of steel products including machine wire, rebars (CA-50 and CA-60), steel billets, and industrial gases. AVB positions itself as a leader in sustainable steel production, supported by certifications such as ResponsibleSteel™ and CO2 emission certificates. The website reflects a mature digital presence with multilingual support, investor relations, and sustainability reporting, targeting construction, industrial sectors, and sustainability-conscious stakeholders. Technically, the website is built on WordPress with modern plugins and performance optimizations such as lazy loading and GDPR compliance tools. Hosting appears to be on Microsoft Azure DNS infrastructure. The site is mobile optimized and accessible, with integration of Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical security vulnerabilities or blocking mechanisms were detected. Contact information is comprehensive including emails, contact forms, and physical addresses. The company maintains a professional and consistent brand image with clear navigation and relevant content. Overall, AVB demonstrates a solid business and digital maturity with a focus on sustainability and compliance.

Casa de Metal Espaço Cultural is a Brazilian non-profit cultural institution focused on metallurgy, materials, and industrial heritage. It offers a variety of cultural and educational activities including exhibitions, workshops, theater, and cinema, targeting the general public interested in culture and history. The website is well-structured, professionally designed, and provides rich content about its collections and programming. Technically, it is built on WordPress with modern plugins and accessibility features, hosted by a reputable Brazilian provider. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and serves its cultural mission effectively.

A

ABM - Associação Brasileira de Metalurgia, Materiais e Mineração

abmbrasil.com.br

61

ABM - Associação Brasileira de Metalurgia, Materiais e Mineração is a well-established Brazilian non-profit association serving the metallurgy, materials, and mining sectors. The organization provides a broad range of services including educational courses, industry events, webinars, and publications, targeting professionals, companies, and students within these industries. The website reflects a professional and consistent brand presence with strong industry partnerships and a clear focus on knowledge dissemination and community engagement. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates analytics and user behavior tracking tools like Google Analytics and Hotjar. Hosting is managed via Amazon AWS infrastructure, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, although some security best practices such as security headers and incident response policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, user-friendly, and serves its target audience effectively.

A

American Tourister Brasil

americantourister.com.br

55

American Tourister Brasil operates a professional e-commerce platform specializing in travel luggage and accessories tailored for the Brazilian market. The website reflects a well-known international brand localized for Brazil, offering a variety of luggage types and collections. The platform integrates modern technologies such as React, Next.js, and Shopify, hosted on Vercel with Cloudflare DNS, ensuring good performance and scalability. Marketing and analytics tools like Klaviyo, Okendo, Microsoft Clarity, and Facebook Pixel are actively used to enhance customer engagement and track user behavior. Security posture is solid with HTTPS enforced and secure cookie practices, although explicit security policies and incident response information are not publicly available. Privacy and cookie policies are not found, indicating room for compliance improvement. Overall, the site is safe, professional, and trustworthy for general consumers seeking travel products in Brazil.

IX.br is a key Brazilian Internet Exchange Point operator managed by NIC.br, providing critical infrastructure that enables direct interconnection between Autonomous Systems to optimize Internet traffic flow within Brazil. The website reflects a mature organization with a clear focus on technology and telecommunications sectors, offering services such as traffic aggregation, educational events, and security best practices. The site is well-structured, professionally designed, and targets network operators and Internet service providers in Brazil. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and SweetAlert2, and employs Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and implementing cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

Z

Trending - Zappiens.br

zappiens.br

61

Zappiens.br is a PeerTube-based video hosting platform focused on delivering digital content in the Portuguese language, primarily targeting Brazilian users. The platform offers video streaming services including trending, recently added, and local videos, positioning itself as a niche content provider within the open-source PeerTube ecosystem. The website's branding and content quality are good, with consistent design and a clear focus on Portuguese digital media consumption. Technically, the site leverages modern web technologies including Angular and PeerTube version 6.3.3, ensuring a contemporary user experience. The platform is accessible, mobile-optimized, and uses HTTPS for secure communications. However, some areas such as security headers and privacy compliance policies are lacking, which could be improved to enhance trust and regulatory adherence. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy and cookie policies represent gaps in the security posture. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's Brazilian focus, supporting legitimacy. Overall, Zappiens.br is a functional and legitimate video platform with room for improvement in privacy, security policies, and contact transparency. Strategic enhancements in these areas would strengthen user trust and compliance readiness.

N

Núcleo de Informação e Coordenação do Ponto BR (NIC.br)

ntp.br

58

NTP.br is a Brazilian initiative managed by NIC.br in partnership with the Observatório Nacional to provide accurate and secure time synchronization services across Brazil. The website offers public NTP servers, educational content, and configuration guides for various devices. It holds a strong position as a trusted source for time synchronization in Brazil, supported by government and technical institutions. The technical infrastructure uses modern web technologies such as Bootstrap and FontAwesome, with embedded multimedia content to enhance user engagement. The site is mobile optimized and provides clear navigation, although it lacks explicit privacy and cookie policies. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the domain registration and WHOIS data align well with the website's claims, indicating high legitimacy and trustworthiness.

N

NIC.br - Núcleo de Informação e Coordenação do PONTO BR

ipv6.br

61

IPv6.br is an authoritative Brazilian website dedicated to promoting IPv6 adoption and education. Operated by NIC.br under the oversight of CGI.br, it serves as a comprehensive resource for internet service providers, network professionals, government entities, and the general public interested in IPv6 technology. The site offers educational content, news, events, tools, and connectivity testing services, positioning itself as a key player in Brazil's internet infrastructure development. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, and Piwik analytics. It is mobile-optimized with good navigation and content quality. While the site uses HTTPS and secure external resources, it lacks some advanced security headers and explicit cookie consent mechanisms, which are recommended for enhanced privacy compliance. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. However, it would benefit from publishing formal security policies, incident response contacts, and a vulnerability disclosure framework to strengthen trust and compliance. The domain WHOIS data aligns well with the website's organizational claims, confirming legitimacy and consistent registration. Overall, IPv6.br is a trustworthy, well-maintained resource with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security transparency would further enhance its standing and user trust.

N

Netza&CO

netzaeco.com.br

57

Netza&CO is a Brazilian marketing company specializing in integrated marketing solutions, positioning itself as a reference in the marketing sector. The website presents a professional design with clear branding and content focused on marketing services. The technical infrastructure is built on modern web technologies including Readymag platform, Google Tag Manager for analytics, and uses popular web fonts to enhance user experience. Mobile optimization is good, and the site loads with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

S

SAP Concur

concur.com.br

65

SAP Concur Brasil provides comprehensive corporate travel and expense management solutions, helping businesses automate and control financial processes. As a subsidiary of SAP, it holds a strong market position with a broad portfolio including Concur Expense, Travel, and Analytics. The website reflects a mature digital presence with professional design, clear navigation, and rich multimedia content tailored to corporate clients in Brazil. The technical infrastructure leverages Drupal CMS, Akamai CDN, and New Relic monitoring, ensuring performance and reliability. Security posture is solid with HTTPS, cookie consent via TrustArc, and monitoring, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high business credibility and compliance with privacy regulations.

T

The Boeing Company

boeing.com.br

63

The Boeing Brasil website serves as a regional portal for The Boeing Company, a global leader in aerospace manufacturing and defense. The site provides comprehensive information about Boeing's operations, products, and corporate responsibility initiatives in Brazil and Latin America. It targets business clients, partners, aviation industry stakeholders, and the general public interested in Boeing's activities in the region. The website reflects Boeing's enterprise-level stature with consistent branding and professional content.

A

ABNT

abntcatalogo.com.br

54

ABNT Catalogo is a professional e-commerce platform operated by ABNT, the Brazilian Association of Technical Standards, providing access to Brazilian technical standards, certifications, and related educational resources. The platform targets businesses and professionals requiring official standards for compliance and quality assurance. The website is well-branded, consistent, and offers a good user experience with clear navigation and mobile optimization. It integrates Google Analytics for user tracking and provides contact information including email and phone support. Technically, the site is built on a mature ASP.NET WebForms framework with Telerik UI components, indicating a stable but somewhat legacy infrastructure. Performance is moderate with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is solid but could be improved by implementing additional security headers and cookie consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. No critical vulnerabilities or suspicious patterns were detected, and the content is safe for general audiences.

R

RichmondShare Blog | High quality content and interaction in the ELT world | RichmondShare is a free-access blog aimed at teachers and future teachers of English as a Foreign Language where ELT professionals (authors, editors, teachers educators, teachers etc) share their ideas, experiences and reflections.

richmondshare.com.br

68

RichmondShare is a niche educational blog focused on English Language Teaching (ELT) professionals and future teachers, primarily targeting the Brazilian market. The website serves as a free-access platform for sharing ideas, experiences, and reflections within the ELT community. It operates on a WordPress CMS with standard SEO optimizations and integrates Google Analytics and Tag Manager for visitor tracking. Hosting infrastructure appears to be on Amazon AWS, providing reliable performance and scalability. The site demonstrates good mobile optimization and accessibility basics, supporting a positive user experience for its audience. However, the absence of explicit privacy and terms of service pages, as well as contact information, limits its compliance and business transparency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies. Overall, RichmondShare is a credible educational resource with room for improvement in privacy compliance and business information transparency.

Santillana is a well-established educational content provider focused on Spanish language learning materials in Brazil. The website serves as a portal offering catalogs, educational resources, and accessible content for students and educators. The business operates under the Grupo Santillana umbrella, leveraging partnerships with related educational brands such as Moderna and Richmond. The site is professionally designed with consistent branding and targets educational institutions and learners. Technically, the site uses a custom CMS (Lumis Portal) and integrates common analytics and tracking tools such as Google Analytics and Facebook SDK. Hosting is professional, utilizing AWS DNS infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the site is safe, accessible, and trustworthy for its intended audience.

The ABNT Coleção website serves as a digital platform managed by the Associação Brasileira de Normas Técnicas, providing centralized access to a wide range of technical standards from Brazil and other major countries. The platform targets businesses and professionals who require reliable and secure access to these standards, supporting compliance and technological advancement. The business model revolves around subscription-based access to these norms, positioning ABNT as a key national and international standards authority. Technically, the website is built on a mature ASP.NET WebForms framework with Telerik UI components, enhanced by modern libraries such as jQuery and Google reCAPTCHA v3 for security. While the technology stack is somewhat legacy, it is functional and integrates essential security features like HTTPS and bot protection. The site demonstrates moderate performance and basic mobile optimization, with room for improvements in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect login forms, but lacks explicit security headers and detailed security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Privacy compliance is basic, with cookie consent implemented and a privacy policy linked externally, though GDPR compliance is not explicitly confirmed. Overall, the website is professional, trustworthy, and aligned with its business purpose. Strategic recommendations include enhancing security headers, improving mobile and accessibility features, and publishing comprehensive security and incident response policies to strengthen trust and compliance.

S

SPEEDBIRD VEICULOS AEREOS NAO TRIPULADOS SA

speedbird.aero

60

Speedbird Aero is a Brazilian-based company specializing in drone delivery logistics, offering a certified and innovative platform for commercial, industrial, and healthcare sectors. Their business model centers on Drone as a Service (DaaS), providing unmanned aircraft systems, navigation software, and droneport infrastructure to enable efficient and safe package delivery. The company has established partnerships with major clients and operates globally with plans for expansion by 2030. Technically, the website employs modern web technologies such as jQuery and Bootstrap, with integrated analytics and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and published security policies, indicating room for improvement. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

A

Avalia Educacional

avaliaeducacional.com

55

Avalia Educacional is an established educational assessment service provider operating as part of Grupo Santillana, the largest educational group in Latin America. The company focuses on delivering quality educational evaluations to support managers, teachers, and students across 22 countries, with a significant market presence and recognition. The website serves primarily as an informational landing page with basic content and contact details, indicating a medium-sized business with a solid foundation and market leadership in its sector. Technically, the website is simple and uses basic web technologies such as HTML5, CSS3, and Google Fonts. Hosting and domain registration are managed through Amazon Registrar, Inc., suggesting reliable infrastructure. However, the site lacks advanced technical features such as CMS, analytics, or security headers, and the performance and mobile optimization are basic. There is no evidence of modern frameworks or platforms, and SEO and accessibility features are minimal. From a security perspective, the site uses domain status protections but lacks DNSSEC and security headers. There is no visible privacy policy, cookie consent, or incident response information, which are critical for compliance and user trust. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement and data-driven insights. The absence of tracking or analytics tools suggests minimal user tracking, which is positive for privacy but limits marketing intelligence. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content. The domain age and WHOIS data support the legitimacy of the business. Strategic recommendations include enhancing security posture by enabling DNSSEC and security headers, publishing privacy and cookie policies, and adding incident response and vulnerability disclosure information. Improving technical sophistication and user engagement features would also benefit the business's digital maturity and compliance standing.

Richmond, operated under Santillana Educação, is an educational content portal serving primarily Brazilian educators and students. The website offers access to educational materials, catalogs, and exclusive content, with a focus on accessibility and user experience. The portal integrates with other Santillana and Moderna educational platforms, indicating a broad ecosystem of educational services. Technically, the site uses a legacy CMS (Lumis Portal) and includes standard tracking and consent mechanisms, but relies on older JavaScript libraries which may pose security risks. Security posture is moderate with room for improvement in headers and modern best practices. Privacy compliance is basic, with cookie consent implemented but no explicit privacy policy found in the analyzed content. Overall, the site is professional, trustworthy, and safe for general audiences.

E

Editora Moderna

salamandra.com.br

73

Editora Moderna is a well-established Brazilian educational publisher specializing in literature and didactic materials for schools and educational institutions. The website serves as a comprehensive catalog for their literature offerings, targeting educators, students, and institutions. The company operates under the Santillana group, with related brands such as Richmond and Santillana Espanol. The site demonstrates a professional digital presence with modern web technologies and a focus on accessibility and privacy compliance. Technically, the site uses Next.js framework, hosted on AWS infrastructure, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.

S

Santillana Educação

sistemafb.com.br

64

Sistema Farias Brito de Ensino, operated by Santillana Educação, is a leading educational platform in Brazil specializing in ENEM exam preparation. The website presents a professional and consistent brand image, targeting students and educational institutions. The business model focuses on providing comprehensive teaching systems and educational content to prepare students for academic success. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, AddThis, and RD Station, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a good balance of usability, compliance, and marketing sophistication, positioning it well in the Brazilian education sector.

M

Home < Moderna Compartilha - Um projeto para empoderar sua escola

modernacompartilha.com.br

65

The website modernacompartilha.com.br appears to be a business platform primarily targeting the Brazilian market. It leverages WordPress CMS with Elementor and integrates multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. The site implements a cookie consent mechanism compliant with GDPR, indicating a focus on privacy compliance. However, explicit business contact information and detailed security policies are not present, which limits transparency. Technically, the site is hosted on AWS with DNS configured accordingly, and HTTPS is enabled, providing a good baseline security posture. The absence of security headers and incident response information suggests room for improvement in security maturity. Overall, the site is functional with moderate technical and privacy compliance maturity but would benefit from enhanced transparency and security hardening.

S

Santillana

santillana.com.br

68

Santillana is a well-established educational publisher operating in Brazil, providing educational content and learning resources targeted at students, educators, and educational institutions. The website reflects a professional digital presence with consistent branding and good content quality focused on education. The technical infrastructure leverages modern analytics and marketing technologies, hosted on AWS with strong HTTPS enforcement and security headers, indicating a mature digital setup. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust and compliance. Overall, the website demonstrates a solid security posture with no critical vulnerabilities detected, and privacy compliance is supported by comprehensive cookie and privacy policies integrated with a recognized consent management platform. Strategic recommendations include publishing clear security and incident response policies, implementing a vulnerability disclosure mechanism, and enhancing accessibility features to further improve user experience and compliance.

S

Santillana

santillanaeducacao.com.br

64

Santillana is a well-established educational content provider operating primarily in Brazil. The website presents educational services and digital learning platforms targeting students, educators, and schools. The company leverages modern web technologies and tracking tools to optimize user experience and marketing efforts. The site is hosted on Amazon AWS infrastructure, indicating a robust hosting environment. Privacy compliance is addressed with a linked privacy policy that aligns with GDPR standards, and a consent management platform is implemented to handle cookie preferences. However, explicit contact information and detailed security policies are not prominently available on the homepage, which could be improved to enhance transparency and trust. Overall, the website demonstrates a solid technical foundation with good security posture and compliance practices.